(Q) Is OEM unlock staying enabled? - Nexus 6 Q&A, Help & Troubleshooting

I factory img flashed to 5.0.1 and sideloaded 5.1 to run completely stock. I enabled Allow OEM Unlock in developer options even though i'm unlocked, out of paranoia seeing what other people are running into.
Now the questions...
Any one else that has updated, is Allow OEM Unlock staying enabled on reboot? Mine isn't and i thought it did on 5.0.*.
Any one still on 5.0.* is your Allow OEM Unlock enabled after reboot?
Thanks.

Update: Flashed back to 5.0.1 factory and the Allow OEM unlock is persistent through reboots. 5.1 did not for me. Can someone on 5.1 reboot and see if allow stay on for them? I'm wondering if this is the reason people are losing access to flash in fastboot. Maybe a bug...

It resets on me. Boot loader remains unlocked. As long as the boot loader is unlocked what does that setting even do? I figured it was just for the first time you ever unlocked.

Mine does not stay checked upon reboot. Anyone else?

It resets on 5.1. It stays on 5.0.*. That setting allows you to unlock. Seems several people are being "relocked" after loading 5.1. Idk what this means yet.

nbdysreal said:
It resets on 5.1. It stays on 5.0.*. That setting allows you to unlock. Seems several people are being "relocked" after loading 5.1. Idk what this means yet.
Click to expand...
Click to collapse
I was able to get it to stick on 5.1 , first I rebooted with my password enabled and it did not stick. Once I removed the screen lock password and re-enabled allow OEM unlock toggle it stuck through the reboot. Hope this helps.
Edit: I was wrong. If I go into developer options immediately after reboot OEM unlock is still enabled, if I go out and back in it is reset.
Sent from my Nexus 6 using XDA Premium HD app

nbdysreal said:
It resets on 5.1. It stays on 5.0.*. That setting allows you to unlock. Seems several people are being "relocked" after loading 5.1. Idk what this means yet.
Click to expand...
Click to collapse
I think these people are locking the bootloader themselves.

rootSU said:
I think these people are locking the bootloader themselves.
Click to expand...
Click to collapse
The toggle just resets. You still have an unlocked boot loader. Not sure why the toggle reverts upon reboot.

elreydenj said:
The toggle just resets. You still have an unlocked boot loader. Not sure why the toggle reverts upon reboot.
Click to expand...
Click to collapse
This ^^^
Who cares about the toggle? Once you have it unlocked, you'd have to be entirely MAD to re-lock it. First thing I always do with a Nexus, is unlock it.

doitright said:
This ^^^
Who cares about the toggle? Once you have it unlocked, you'd have to be entirely MAD to re-lock it. First thing I always do with a Nexus, is unlock it.
Click to expand...
Click to collapse
Yep, the problem is in their quest to resolve their issues (for some inexplicable reason) they seem to be doing it. No idea why they do it, but it's ruined things for them

doitright said:
This ^^^
Who cares about the toggle? Once you have it unlocked, you'd have to be entirely MAD to re-lock it. First thing I always do with a Nexus, is unlock it.
Click to expand...
Click to collapse
I agree with this I think people when reverting back to take the ota think that they have to have it lock. You dont have to do this. I for sure dont.
I honestly think that people are locking it back themselves. I also just for myself make sure that toggle is ticked to be safe.

the_rooter said:
I agree with this I think people when reverting back to take the ota think that they have to have it lock. You dont have to do this. I for sure dont.
I honestly think that people are locking it back themselves. I also just for myself make sure that toggle is ticked to be safe.
Click to expand...
Click to collapse
Some of the therads I read, they certainly stated that they relocked it themselves. I can't see the update doing that in the other cases to be honest

Related

ATT nexus 6 questions

Couldn't find much about this varient just wanted to ask a few questions.
1. Do I treat it like every other google play nexus? Unlock boot loader, flash twrp, boot, backup, reboot, wipe, install ROM? No different partition weirdness?
2. Cm12, are the hotspot checks removed? Fiance is limited data plan I'm not so while out she normally uses my data via hotspot.
3. Cm12 have notification light activated and customizable?
Don't really care about the Sim lock honestly. Been with ATT forever and poor so not leaving the country anytime soon.
Thanks, sorry for repeat questions just didn't get solid answers from things I found.
No partition weirdness. Root as normal. It does have its own boot logo-thing though, which is lame.
Unfortunately I don't know about CM12. Sorry
squattingdonkey said:
No partition weirdness. Root as normal. It does have its own boot logo-thing though, which is lame.
Unfortunately I don't know about CM12. Sorry
Click to expand...
Click to collapse
At least you answered my bricking level question! Thanks!
CM 12 does have working hot spot on AT&T and customizable notification light. And, boot logo is easily removed after root.
Somehow I soft bricked my n6. I unlocked boot loader, installed twrp, went to backup and it couldn't find any partitions. Tried the flash all script from google factory image and that failed as well. Had to flash boot radio recovery etc images each manually to get back to a booting phone. Then installed twrp again and backup and flashing worked.
It was an adventure but I'm good now. Weird not sure why it did that. Must have been an encryption issue.
On the stock ROM you have to tick a box in developer options to enable OEM unlock. I forgot to mention that earlier. That may have been the issue.
ajjames01 said:
On the stock ROM you have to tick a box in developer options to enable OEM unlock. I forgot to mention that earlier. That may have been the issue.
Click to expand...
Click to collapse
Oops yeah that may have been it. I just did the usual fastboot OEM unlock code. Mild panic attack but when I saw I could get to the bootloader I knew I could save it.

Generaly Purpose Security

Simply put I want to Lock my bootloader and recovery even disabling recovery would be fine.
I'm basically asking if this is possible although I understand there are so to speak 1337 methods to bypass the Security measures I'm concerned with.
It's just most people's first approach to a phone they just found/stole is factory reset where frp would kick in, with the unlocked bootloader that would be easy af to bypass. *Not to mention frp bypass methods that are public
My goal is to set up my phone with the latest release of Pure Nexus + root and Latest TWRP, from there Lock the bootloader and then secure TWRP IE recover with a return to owner for reward with contact info.
Basically disabling/locking recovery with a return to owner screen and locking the bootloader as basic deterrent's for any common / petty their or anyone looking to upgrade to the phone they just found if you catch my drift.
-Also it would be nice to feel a little more secure with all these extra features PureNexus offers although I get that Android Security is fundamentally flawed these are just deterrents, also I'd be stoked to see this on a device I come across.
*Wouldn't hesitate to up call the owner of a phone that properly configured, although I know I could bypass it just a respect thing for me. :3
You can lock the bootloader, but it can simply be unlocked again. The only way to ensure it can't be unlocked is to encrypt it, and no Nexus device has an encrypted bootloader. Recovery cannot be disabled, though you could flash a non-working recovery image to the recovery partition. In that case however, simply unlocking the bootloader would allow someone to flash a recovery image to the device.
Your goals are laudable, but you're wasting your time here. To accomplish your end goal requires a device with an encrypted bootloader, which means you want something that isn't a Nexus and is sold through AT&T or Verizon. Both carriers encrypt the bootloader so you can't unlock it.
So basically because the bootloader cannot be secured my efforts would be in vain, are we sure I can't simply relock the bootloader in the same fashion that the stock rom is shipped out.
IE I remember having to OEM unlock in order to flash a custom recovery, with that being said after flashing a disabled recovery is it not possible to then re enable OEM lock somehow even with Pure Nexus running.
*Perhaps even only with the stock rom?
I'll make this as plain as I can. The only way to secure the bootloader is to encrypt it. Locking the bootloader and resetting the OEM Unlocking toggle in Developer Options won't help since any potential thief can simply unlock the bootloader. If you want to improve security, set a pin, pattern lock, or password after you mess around with locking the bootloader and setting the OEM Unlock toggle to off (if possible).
Simply disabling the ome toggle in developer setting doesn't relock the bootloader so would you say it's safe to run "fastboot oem lock" with Pure Nexus installed wipe data and then disable the oem toggle?
If that works wouldn't it be True to say I would need re enable the oem toggle and then "fastboot oem unlock" if I ever intended to replace the disabled recovery.
I really just wanted to shoot in the dark, although I don't want to brick my Nexus 6. Also sorry for a better lack of information on my part I don't mean to be a hassle.
JmakeITlookEZY said:
Simply disabling the ome toggle in developer setting doesn't relock the bootloader so would you say it's safe to run "fastboot oem lock" with Pure Nexus installed wipe data and then disable the oem toggle?
If that works wouldn't it be True to say I would need re enable the oem toggle and then "fastboot oem unlock" if I ever intended to replace the disabled recovery.
I really just wanted to shoot in the dark, although I don't want to brick my Nexus 6. Also sorry for a better lack of information on my part I don't mean to be a hassle.
Click to expand...
Click to collapse
Never lock the bootloader when running a.custom ROM... Bad very bad idea
rignfool said:
Never lock the bootloader when running a.custom ROM... Bad very bad idea
Click to expand...
Click to collapse
Worth asking why?
As in is this a goal worth pursuing IE a custom or unofficial build that supports such functionality.
Possibly already done: http://android.stackexchange.com/qu...4-7-bootloader-after-flashing-a-non-stock-rom
JmakeITlookEZY said:
Worth asking why?
As in is this a goal worth pursuing IE a custom or unofficial build that supports such functionality.
Click to expand...
Click to collapse
Because...
Stock ROMs are tested and tested for compatibility... To make sure you don't wind up in a bootloop (unless you have an LG)
Custom ROMs... Are not... No matter beans best intentions... He's no OEM...
You wind up in a bootloop for whatever reason... And a factory reset doesn't fix it... You're done... You have a paperweight...
So proceed as pleased, if I feel risky or got an extra Shamu I'll shoot in the dark and post the results. :3
More info:
What the consequences are really depends on your device. Most devices enable signature-verification for the boot partition (kernel) which prevents you from booting any kernels not signed by device manufacturer (unless you exploit some security breaches like 2nd boot). They also disallow you to flash any partition via 'fastboot flash' command, but not on all devices.
So no, you are not okay with relocking your phone: If you use custom firmware, you typically use a custom kernel and in this case, re-locking your bootloader via 'fastboot oem lock' will put your device in a state where it will not boot anymore! Be careful with that.
Info source: http://android.stackexchange.com/users/89475/kuleszdl
Idea: Disable signature-verification?
Note: Everyone thinks it will brick no one has said it happened, very strong possibility signature-verification is enabled. ?
are you an secret agent or something?
why the extreme paranoia about having this phone?
wase4711 said:
are you an secret agent or something?
why the extreme paranoia about having this phone?
Click to expand...
Click to collapse
I agree.
@JmakeITlookEZY, Basically, if your trying to say they want to give someone a phone that cannot be unlocked after locking it, then this isn't the device for you. There is an 'OEM Unlock' to prevent this but to hide this setting, would have no idea . And if you lock the bootloader and then someone wants to unlock it, it has to wipe the device.
Just have to live with the fact if someone wants to try and unlock the device, it's gonna get wiped no matter what. I'm no security expert but if you're worried something is going to happen to your phone, then you shouldn't be using it.
And if your really concerned, using a screen lock will prevent users from going into the recovery or booting the device anyways.
Gysper said:
?
Click to expand...
Click to collapse
It would be nice to feel confident enough to leave my device lying around or even lose it and know that it will either be returned or discarded.
I believe that level of security should be an option, not to mention have the ability to do it to begin with.
JmakeITlookEZY said:
It would be nice to feel confident enough to leave my device lying around or even lose it and know that it will either be returned or discarded.
I believe that level of security should be an option, not to mention have the ability to do it to begin with.
Click to expand...
Click to collapse
Yeah its called GPS
google Android Device Manager and use the locate device. You can even lock it if lost and erase all data.
Gysper said:
?
Click to expand...
Click to collapse
Not really a concern, if someone decided to keep the device the first step would be turn it off.
*More than likely reset from there epically considering encrypting the device would be a given.
JmakeITlookEZY said:
Not really a concern, if someone decided to keep the device the first step would be turn it off.
*More than likely reset from there epically considering encrypting the device would be a given.
Click to expand...
Click to collapse
Buy a tracking device and hack the phone. Problem solved
Gysper said:
?
Click to expand...
Click to collapse
Care to elaborate "tracking device" & "hack the phone" just dosen't seem to be what I'm shooting for.
JmakeITlookEZY said:
Care to elaborate "tracking device" & "hack the phone" just dosen't seem to be what I'm shooting for.
Click to expand...
Click to collapse
So you don't work for the CIA...
Let's be real, if you have no trust when something gets lost, then you don't deserve it. Should do your research and check out how to prevent something if it get's lost: http://www.apartmenttherapy.com/what-really-happens-when-a-smartphone-is-lost-195321
This is not a suicide hotline thread, if you're scared about losing something and not getting it returned, then I have to say you have a serious episode of OCD. Don't be that guy and learn to live with the consequences.
Gysper said:
?
Click to expand...
Click to collapse
Just to be Frank this is about information and general purpose security how you perceive it, is whatever.
*Also to address the "you don't deserve it" my concerns are the opposite it's not that I don't deserve it, more the other way around.
Update: Found more information that pretty much sums up what I hope to accomplish aswell as the implications.
Source: http://www.androidpolice.com/2011/0...ncryption-signing-and-locking-let-me-explain/
Update,
May be possible via: https://forum.xda-developers.com/an...signing-boot-images-android-verified-t3600606

Unroot and relock bootloader

I'm currently considering unrooting my turbo and relocking the bootloader but am not completely sure how. Looking for confirmation that I'll be doing it right.
1. Flash the fix to remove the unlocked bootloader warning
2. Uninstall all root apps (xposed and superSU)
3. Flash stock recovery
4. Fastboot oem lock
I'm already on the stock mm rom and I think I might have to flash a stock bootloader before the stock recovery, but not sure.
Thanks for any help.
Any reason why? Will be very hard -- almost impossible to unlock it again. OK, very hard.
subprime said:
1. Flash the fix to remove the unlocked bootloader warning
Click to expand...
Click to collapse
THAT should have already been done, when you first unlocked the bootloader.
ChazzMatt said:
Any reason why? Will be very hard -- almost impossible to unlock it again. OK, very hard.
Click to expand...
Click to collapse
I'm getting tired of carrying this phone and another for work. I need mobile iron for my emails and haven't found any solution to get it to work while rooted.
And you answered my next question too. Would I be able to unlock it again. If i don't take any updates can't I just follow the same process to unlock and root again?
subprime said:
I'm getting tired of carrying this phone and another for work. I need mobile iron for my emails and haven't found any solution to get it to work while rooted.
And you answered my next question too. Would I be able to unlock it again. If i don't take any updates can't I just follow the same process to unlock and root again?
Click to expand...
Click to collapse
In the beginning you could only use Sunshine one time per phone. I think some others have locked and unlocked, but I'm not sure the process. I think you have to contact Sunshine team? Others can answer if they remember how to do it.
Can you use Magisk to hide root? It seems to work with Android Pay and other stuff.
I'll take a look and give it a shot. Phone has to be encrypted too and from what I read I'm pretty sure I have to unroot for that.
Thanks
My phone is encrypted, rooted with Magisk, and I use Outlook for work
Bootloader logos to replace unlocked warning:
https://forum.xda-developers.com/showthread.php?p=72047829
Choices of TWRP or ADB.
I'm currently using the Dark Google ATAP.
TheSt33v said:
My phone is encrypted, rooted with Magisk, and I use Outlook for work
Click to expand...
Click to collapse
We used to be able to just use outlook, but they switched to touchdown with mobile iron. They don't control it to the fullest, but the permissions it has are ridiculous. They just recently completely disabled smart lock.
I have it set up on a 2nd gen moto x right now and would just swap the numbers but that thing can't do voice and data simultaneously, which I need regularly (gps and phone calls).
subprime said:
We used to be able to just use outlook, but they switched to touchdown with mobile iron. They don't control it to the fullest, but the permissions it has are ridiculous. They just recently completely disabled smart lock.
I have it set up on a 2nd gen moto x right now and would just swap the numbers but that thing can't do voice and data simultaneously, which I need regularly (gps and phone calls).
Click to expand...
Click to collapse
Lame. Well hopefully Magisk can work its magic...sk.

Unlocked Bootloader = No Fingerprint

Fingerprint on this device is disabled after i unlocked bootloader, I tried complete wiping the device multiple times as i thought this was my own fault since i had setup the device prior to unlocking bootloader. No dice.
I thought maybe that a wipe would clear the fingerprint cache or something and make it work.
After locking the bootloader the reader starts working again.
Was this supposed to be the expected behaviour?
I refuse to believe that they would completely disable it system wide instead of just preventing payments etc like normal.
As a side note, transferring user data from an old phone is also broken by bootloader unlock, errors out with "something went wrong" when hitting the copy button to start the transfer.
Just as another side note, the system partition cannot be erased with fastboot either, access denied error even with unlocked bootloader. I figured this out while trying to get my fingerprint reader working. I tried multiple commands and also mfastboot instead of android sdk fastboot
Good news BL is unlockable, bad news FP scanner gets disabled. How about unlocking the BL, rooting the phone with Magisk, and then relocking the BL? Will this work? I haven't got the phone yet, it's arriving next week. Thanks for sharing your findings.
I haven't had a chance to try that. This phone is now my daily driver and I'm working for the next few days so I won't be able to get around to trying until then. I'm sure it wouldn't work though because I believe the device wouldn't boot after the bootloader was modified since locking the bootloader after installing magisk would probably not work.
Might actually brick the device https://forum.xda-developers.com/oneplus-5t/help/relock-bootloader-flash-magisk-t3840071/
darkdaemon32 said:
Might actually brick the device https://forum.xda-developers.com/oneplus-5t/help/relock-bootloader-flash-magisk-t3840071/
Click to expand...
Click to collapse
Certainly looks too risky
Hey, that's weird. I unlocked BL, flashed magisk and my fingerpring works flawlessly.
Hi all, can someone point me in the right direction/guide for unlocking BL and rooting my Motorola One Zoom (Retail US) I appreciate your feedback ??? really looking to get Viper4Android and some other rooted app goodies on my device. Thanks!
Jaysmith696 said:
Hi all, can someone point me in the right direction/guide for unlocking BL and rooting my Motorola One Zoom (Retail US) I appreciate your feedback ??? really looking to get Viper4Android and some other rooted app goodies on my device. Thanks!
Click to expand...
Click to collapse
Hey, I'm gonna prepare a guide for BL unlocking, magisk and xposed for our device. Should be available in 4-5 hours from now.
rafikowy said:
Hey, I'm gonna prepare a guide for BL unlocking, magisk and xposed for our device. Should be available in 4-5 hours from now.
Click to expand...
Click to collapse
You're the best! Thank you so much
Jaysmith696 said:
You're the best! Thank you so much
Click to expand...
Click to collapse
Sorry but unfortunately I won't be able to prepare instructions tonight. Too busy before holidays. Will be back on 25th of Sep. But what can I say is that procedures to "unlock bootloader", "magisk" and "xposed" are very common for many devices (including moto one zoom) and can be easily found in the internet.
btw: PPH29.59-34 software update has just arrived (I live in Poland).
rafikowy said:
I unlocked BL, flashed magisk and my fingerpring works flawlessly
Click to expand...
Click to collapse
Model №? FW Version?
OP, did you try Magisk?
I did not have a chance to try magisk as I was only testing unlocking to see if anything broke. And whenever I couldn't set it up with fingerprint I relocked and wanted to wait to see if others have the same issue. I'm on this fw https://mirrors.lolinet.com/firmwar...ubsidy-DEFAULT_regulatory-DEFAULT_CFC.xml.zip
Hi - I was on Motorola website and didn't see anything listed for device bootloader unlock for Motorola One Zoom, how were you guys able to do this?
You need to create a Motorola account but the pages are located here
https://motorola-global-portal.custhelp.com/app/standalone/bootloader/unlock-your-device-a
https://motorola-global-portal.custhelp.com/app/standalone/bootloader/unlock-your-device-b
Jaysmith696 said:
Hi - I was on Motorola website and didn't see anything listed for device bootloader unlock for Motorola One Zoom, how were you guys able to do this?
Click to expand...
Click to collapse
darkdaemon32 said:
You need to create a Motorola account but the pages are located here
https://motorola-global-portal.custhelp.com/app/standalone/bootloader/unlock-your-device-a
https://motorola-global-portal.custhelp.com/app/standalone/bootloader/unlock-your-device-b
Click to expand...
Click to collapse
Thanks darkdaemon, I was able to unlock Bootloader and root with Magisk, the only thing my Fingerprint lock method no longer enabled, I can't use pin, pattern or password, so my device has no way to screen lock ?
I'm just happy it's rooted, if there's a way to fix this I hope someone can shed some light ?
Jaysmith696 said:
Thanks darkdaemon, I was able to unlock Bootloader and root with Magisk, the only thing my Fingerprint lock method no longer enabled, I can't use pin, pattern or password, so my device has no way to screen lock
I'm just happy it's rooted, if there's a way to fix this I hope someone can shed some light
Click to expand...
Click to collapse
I'm having the exact same issue after unlocking bootloader. I didn't modify anything at all and still my phone's lock function is completely disabled. Only way I could fix it was going back to stock and re locking bootloader. I'm currently without root or any modifications because of this. I'm also waiting on a fix
Have unlocked the BL straight upon receiving the device and FP scanner is working no problem. I didn't register any fingerprints (or set up any screenlock) prior to unlocking. My Build is PPH29-59-29, SW channel retgb.
This may be where my issue is. I had setup the phone and registered my fingerprints prior to the unlock. Im guessing that they are being stored somewhere that I cannot wipe such as /system or inside an enclave chip etc. Because the only partition I couldn't manually use an erase command for was /system as I was getting access denied error. I may get around to trying the Lenovo phone tool and/or removing fingerprints first to see what happens. I just need to find the time to mess with it.
crubbish said:
Have unlocked the BL straight upon receiving the device and FP scanner is working no problem. I didn't register any fingerprints (or set up any screenlock) prior to unlocking. My Build is PPH29-59-29, SW channel retgb.
Click to expand...
Click to collapse
I don't know why you've got figerprint and everybody's not. I don't have one either. This is also a problem with phones from other manufacturers.
Would you mind seeing who the fingerprint scanner manufacturer is?
I have Goodix.
Maybe it depends. Or maybe the system will shutdown it after unlocking the bootloader.

Somehow stuck at Secure start-up - How Hosed am I?

Hello and thanks for your help. Somehow, on a reboot of my new 405QA I am stuck at the secure startup screen as seen in the attached image. I have no idea what this is, what it means, or how to get past it. I do not use anything but a swipe lockscreen so there is no fingerprint, pin, or pattern if that is what it seeks. I do not think I even enabled this "feature" but maybe it was turned on by default?
Anyhow, what can I do? I would like to preserve my system and I believe that if I fail to come up with what it wants, it will factory reset the phone.
Thanks for your help!
I gave up and went through the 30 tries until the thing factory reset. What BS. I never enabled this.
whitedavidp said:
I gave up and went through the 30 tries until the thing factory reset. What BS. I never enabled this.
Click to expand...
Click to collapse
This same thing happened to me when I first tried to unlock the bootloader and root the device. It is not an easy thing to do. I, like you, ran into roadblocks along the way. Lucky for me, I was upgrading from a Nexus 6 (still love that phone) that was operating just fine. So I could take my time and get the LG40 up and running how I wanted it to be (bootloader unlocked, unencrypted and rooted with Magisk) before I began setting it up.
Just be patient, and you'll get there too.
[NG]Owner
NGOwner said:
This same thing happened to me when I first tried to unlock the bootloader and root the device. It is not an easy thing to do. I, like you, ran into roadblocks along the way. Lucky for me, I was upgrading from a Nexus 6 (still love that phone) that was operating just fine. So I could take my time and get the LG40 up and running how I wanted it to be (bootloader unlocked, unencrypted and rooted with Magisk) before I began setting it up.
Just be patient, and you'll get there too.
[NG]Owner
Click to expand...
Click to collapse
How did you guys fix it? Same roadblock too
minecraftuser1999 said:
How did you guys fix it? Same roadblock too
Click to expand...
Click to collapse
You could try resetting the device using the button combination

Categories

Resources